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In the Claims 

Claims 1-26 remain in the application for consideration and are listed as 
follows: 

1 . (Original) A method for use in a computer capable of supporting 
multiple authentication mechanisms, the method comprising: 

generating at least one indicator associated with and identifying at least one 
authentication mechanism; and 

controlling access to at least one resource based on the indicator. 

2* (Original) The method as recited in Claim 1, wherein generating the 
indicator further includes receiving inputs, providing the inputs to the 
authentication mechanism, and causing the authentication mechanism to generate 
at least one security identifier (SID) that identifies the authentication mechanism. 

3. (Original) The method as recited in Claim 1 ? wherein generating the 
indicator Anther includes identifying within the indicator at least one characteristic 
associated with the authentication mechanism. 

4. (Original) The method as recited in Claim 3, wherein the at least one 
characteristic associated with the authentication mechanism includes a measure of 
strength of the authentication mechanism. 
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5. (Original) The method as recited in Claim 4, wherein the measure of 
strength of the authentication mechanism identifies a length of an encryption key 
employed by the authentication mechanism, 

6. (Original) The method as recited in Claim 1, wherein controlling 
access to the resource based on the indicator further includes comparing the 
indicator to at least one access control list having at least one access control entry 
therein, 

7. (Original) The method as recited in Claim 6, wherein if the access 
control entry operatively specifies that the at least one authentication mechanism 
is permitted to access the resource, then access to the at least one resource is 
allowed to proceed. 

8. (Original) The method as recited in Claim 6, wherein if the access 
control entry operatively specifies that the at least one authentication mechanism 
is not permitted to access the resource, then access to the at least one resource is 
not allowed to proceed. 

9. (Original) The method as recited in Claim 6, wherein if the access 
control entry does not operatively specify that the at least one authentication 
mechanism is permitted to access the resource, then access to the at least one 
resource is not allowed to proceed 
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1 0. (Original) The method as recited in Claim I , wherein the indicator 
includes a security token. 

1 1 . (Original) A computer-readable medium for use in a device capable 
of supporting multiple authentication mechanisms, the computer-readable medium 
having computer-executable instructions for performing acts comprising: 

producing at least one indicator that uniquely identifies at least one 
authentication mechanism supported by the device; and 

causing the device to selectively control access to at least one resource 
operatively coupled to the device based at least in part on the indicator 

12. (Original) The computer-readable medium as recited in Claim 11, 
wherein producing the indicator further includes receiving inputs, providing the 
inputs to the authentication mechanism, and causing the authentication mechanism 
to generate at least one security identifier (SID) that identifies the authentication 
mechanism, in response thereto. 

13. (Original) The computer-readable medium as recited in Claim 11, 
wherein producing the indicator further includes identifying within the indicator at 
least one characteristic of the authentication mechanism. 

14. (Original) The computer-readable medium as recited in Claim 13, 
wherein the at least one characteristic of the authentication mechanism includes a 
strength characteristic of the authentication mechanism. 
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1 5. (Original) The computer-readable medium as recited in Claim 14, 
wherein the strength characteristic identifies a length of an encryption key 
employed by the authentication mechanism. 

1 6. (Original) The computer*readable medium as recited in Claim 1 1 , 
wherein causing the device to selectively control access to the at least one resource 
based on the indicator further includes causing the device to compare the indicator 
to control data . 

9 

10 17. (Original) The computer-readable medium as recited in Claim 1 6, 

11 wherein if the control data specifies that the authentication mechanism is 

12 permitted to access the resource, to which subsequent access to the resource is 

13 allowed, 

14 

is 18. (Original) The computer-readable medium as recited in Claim 1 6, 

16 wherein if the control data operatively specifies that the authentication mechanism 

n is not permitted to access the resource, to which subsequent access to the resource 

is is prohibited. 

20 19. (Original) The computer-readable medium as recited in Claim 1 6, 

21 wherein if the control data does not operatively specify that the authentication 

22 mechanism is permitted to access the resource, to which subsequent access to the 

23 resource is prohibited. 

24 
25 

LLC L Rx\w>, 



PAGE 7116 ' RCVD AT 1121/2005 3:02:02 PM [Eastern Standard Time] ' SVR:USPTO-EFXRF-1/0 ' DNIS:8729306 * CStD:509 323 8979 * DURATION (mm-ss):04-00 



JRN 21 2005 12:20 FR LEE - HAYES PLL 509 323 8979 TO 17038729306 



P. 08/16 



2 
J 
4 
5 
6 
7 
8 
.9 
10 
11 
\2 
13 
14 
15 
16 
17 
18 
19 
20 
2t 
22 
23 
24 
25 



20. (Original) The computer-readable medium as recited in Claim 10, 
wherein the indicator includes a security token. 

2 1 . (Original) An apparatus comprising: 

at least one authentication mechanism configured to generate at least one 
indicator that identifies the authentication mechanism; 
an access control list; 
at least one access controlled resource; and 

logic operatively configured to compare the indicator with the access 
control list and selectively control access to the resource based on the indicator . 

22. (Original) The apparatus as recited in Claim 21, wherein the 
authentication mechanism is further configured to receive user inputs and generate 
at least one security identifier (SID) that identifies the authentication mechanism 
based on the user inputs . 

23. (Original) The apparatus as recited in Claim 21, wherein the 
indicator further includes at least one identifying characteristic associated with the 
authentication mechanism. 

24. (Original) The apparatus as recited in Claim 23, wherein the at least 
one identifying characteristic associated with the authentication mechanism 
indicates a measure of strength of the authentication mechanism 
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25. (Original) The apparatus as recited in Claim 24, wherein the measure 
of strength of the authentication mechanism identifies a length of an encryption 
key employed by the authentication mechanism. 

26, (Original) The apparatus as recited in Claim 23, wherein the 
indicator includes a security token. 
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